System and method for effectuating computer network usage

• US 20060179472A1
• Filed: 12/30/2005
• Published: 08/10/2006
• Est. Priority Date: 12/30/2004
• Status: Abandoned Application

• Current Assignee: International Digital Technologies LLC
• Original Assignee: International Digital Technologies LLC
• Inventors: Lee, Ding-Hou, Ergunay, Tolga, Chang, Ifan
• Application Number:
  US11/323,082
• Publication Number:
  US 20060179472A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

In one example of an embodiment of the invention, a method to control usage of resources on a network by an entity comprising a user and a host device to couple the user to the network is disclosed, comprising receiving identification information from the entity, evaluating the identity of user, and evaluating the host device. In addition, the method comprises evaluating a status of at least one additional condition related to the user and allowing the entity to use one or more network resources based, at least in part, on the evaluations. Conditions may be aggregated from a plurality of network resources. Any of these activities may be performed by plug-ins.

Claims

13. A system to control use of a network, comprising:

a first processor;

a network; and

a plurality of second processors coupled to the network;

wherein the first processor is configured to;

receive from an entity identification information;

transmit the identification information to the plurality of second processors;

receive from at least some of the second processors usage information pertaining to the entity, the usage information comprising at least one condition;

aggregate the received usage information to generate a set of usage rules; and

allow the entity to use the network in accordance with the one or more usage rules.

14. The system of claim 13, wherein the first processor comprises at least one plug-in to determine whether to allow the entity to use the network in accordance with the usage rules.

15. The system of claim 13, wherein the first processor comprises at least one plug-in to aggregate the received usage information to generate the set of usage rules.

16. The system of claim 13, wherein:

the entity comprises a user and a host device; and

the first processor is further configured to

authenticate the user; and

evaluate the host device.

17. The system of claim 13, wherein:

the network comprises a local area network (“

LAN”

) administered by a university or a corporation.

18. The system of claim 13, wherein the usage rules comprise access rules to network resources.

19. The system of claim 18, wherein the usage rules indicate that the entity is authorized to access a specified network resource except during at least one specified time period.

20. The system of claim 13, wherein the first processor is further configured to:

update the set of access rules while the entity has access to the network; and

determine whether the entity can continue to use the network in accordance with the one or more updated usage rules.

21. The system of claim 13, wherein the first processor is further configured to:

monitor the set of usage rules while the entity has access to the network; and

determine whether the entity can continue to use the network in accordance with the usage rules.

22. The system of claim 18, wherein the access information comprises a restriction on access to one or more network resources in accordance with a schedule.

23. The system of claim 18, wherein the usage information comprises operation rules related to a network resource, wherein first processor is configured to:

receive an operation rule related to operation of a network resource by the entity; and

allow the entity to use the network resource in accordance with the operation rule.

24. The system of claim 13, wherein at least some of the plurality of second processor correspond to respective network resources.

25. A method to control usage of resources on a network by an entity comprising a user and a host device to couple the user to the network, the method comprising:

receiving identification information from the entity;

evaluating the identity of user;

evaluating the host device;

evaluating a status of at least one additional condition related to the user;

allowing the entity to use one or more network resources based, at least in part on the evaluations.

26. The method of claim 25, wherein:

evaluating the user comprises authenticating the user.

27. The method of claim 26, wherein authenticating the user comprises implementing a plurality of authentication procedures by a respective plurality of plug-ins.

28. The method of claim 25, wherein evaluating the host device comprises:

determining whether the host device is vulnerable or infected.

29. The method of claim 25, wherein evaluating the status comprises:

determining whether there is a temporal limitation on an activity of the user with respect to the network; and

determining the current time.

30. The method of claim 25, comprising:

evaluating the host device by at least one plug-in.

31. The method of claim 25, comprising:

evaluating the status by at least one plug-in.

32. The method of claim 25, comprising:

evaluating the user, evaluating the host device, evaluating the at least one additional condition, and allowing the entity to use the one or more network resources, by respective plug-ins.

33. The method of claim 25, further comprising:

changing at least one of the evaluations by changing at least one plug-in.

34. The method of claim 25, further comprising:

adding at least one evaluation by adding at least one plug-in.

35. The method of claim 25, comprising:

conducting at least one of the evaluations by a persistent plug-in.

36. The method of claim 25, further comprising:

aggregating a plurality of additional conditions from at least two respective network resources.

37. The method of claim 36, comprising:

aggregating the plurality of additional conditions by a plurality of plug-ins.

38. A system to control usage of resources on a network by an entity comprising a user and a host device to couple the user to the network, the system comprising:

a processor; and

a network;

wherein the processor is configured to;

evaluate the identity of the user;

evaluate the host device;

evaluate at least one additional condition related to the user; and

allow the user to use one or more network resources based, at least in part, on the evaluations.

1. A method, to control usage of resources on a network, comprising:

receiving from an entity identification information;

transmitting the identification information to a plurality of processors in a network;

receiving from at least some of the plurality of processors usage information pertaining to the entity, the usage information comprising at least one condition;

aggregating the received usage information to generate a set of usage rules; and

allowing the entity to use the network in accordance with the one or more usage rules.

2. The method of claim 1, further comprising:

executing at least one plug-in to determine whether to allow the entity to use the network in accordance with the one or more usage rules.

3. The method of claim 1, wherein the entity comprises either or both of a user and a host device.

4. The method of claim 1, wherein the entity comprises a user and a host device, the method further comprising:

authenticating the user; and

evaluating the host device.

5. The method of claim 3, wherein:

the network comprises a local area network (“

LAN”

) administered by a university or a corporation.

6. The method of claim 1, wherein the usage rules comprise access rules for access to a respective processor, the method comprising:

allowing the user to access the network in accordance with the access rules.

7. The method of claim 6, wherein the access rules indicate that the entity is authorized to access a specified network resource except during at least one specified time period.

8. The method of claim 6, wherein the at least one condition comprises a restriction on access to one or more network resources in accordance with a schedule.

9. The method of claim 1, further comprising:

updating the set of usage rules while the entity has access to the network; and

determining whether the entity can continue to use the network in accordance with the updated usage rules.

10. The method of claim 1, further comprising:

monitoring the set of usage rules while the entity has access to the network; and

determining whether the entity can continue to use the network in accordance with the usage rules.

11. The method of claim 1, wherein the usage information comprises operation rules related to a network resource, the method comprising:

receiving an operation rule related to operation of a network resource by the entity; and

allowing the entity to use the network resource in accordance with the operation rules.

12. The method of claim 1, wherein at least some of the processors correspond to respective network resources.

39. The system of claim 38, wherein the processor is configured to evaluate the user by authenticating the user.

40. The system of claim 38, wherein the processor comprises at least one plug-in to authenticate the user.

41. The system of claim 38, wherein the processor is configured to evaluate the status by:

determining whether there is a temporal limitation on an activity of the user with respect to the network; and

determining the current time.

42. The system of claim 38, wherein the processor further comprises at least one plug-in to evaluate the status by at least one plug-in.

43. The system of claim 38, wherein the processor further comprises at least one respective plug-in to:

evaluate the user, evaluate the host device, evaluate at least one additional condition, and allow the entity to use the one or more network resources.

44. The system of claim 38, wherein the processor further comprises a persistent plug-in to conduct at least one of the evaluations.

45. The system of claim 38, wherein the processor further comprises:

a plurality of plug-ins to aggregate a plurality of additional conditions from at least two network resources.

39-1. The system of claim 38, wherein the processor is configured to evaluate the host device by determining whether the host device is infected.

40-2. The system of claim 39, wherein the processor comprises a plug-in to determine whether the host device is infected.